Versions:
eunox-mcp, published by eunolabs, is a policy-enforcement proxy designed to sit in front of Model Context Protocol (MCP) servers and control what those servers are permitted to do. Operating as a deny-by-default capability firewall, the software ensures that no action is allowed unless it has been explicitly granted, which reverses the common pattern of permissive tooling and gives operators a predictable, restrictive security posture out of the box. The enforcement mechanism is driven by a YAML manifest, which administrators place in front of any local or remote MCP server to define the capabilities that may be exercised; requests that fall outside the declared manifest are denied by default rather than evaluated case by case. Alongside enforcement, eunox-mcp writes a tamper-evident audit log of every decision it makes, providing a durable record that can be reviewed after the fact to verify which capabilities were requested, permitted, or blocked. This combination of declarative policy and verifiable logging makes the software relevant to the security, governance, and infrastructure tooling category, particularly for teams adopting MCP-based integrations who need to constrain tool access for AI agents or other MCP clients connecting to servers over a network or on the same machine. Typical use cases include fronting an existing local MCP server with an explicit allowlist of capabilities, applying the same policy discipline to remote MCP servers that may not be fully trusted, and producing an audit trail suitable for compliance review or incident investigation, since the log is designed to reveal any attempt to alter it. Because the proxy is transparent to the underlying server, it can be introduced into an existing MCP deployment without replacing the server itself, serving instead as an enforcement and observability layer. The current version of eunox-mcp is 0.0.1, and the catalog records two published versions in total, indicating an early-stage release line that remains under initial development by eunolabs while already delivering its core firewall, manifest-enforcement, and audit-logging functionality.
Tags: